All MIBs › HPN-ICF-IKE-MONITOR-MIB
Last Updated: 2012-06-28
Category: Technology: VPN, Vendor: H3C/HH3C, Vendor: HP/HPE
Description: Monitors IKEv1/IKEv2 phase-1 SA negotiations and tunnel state for IPsec on HP/Comware VPN gateways.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is HPN-ICF-IKE-MONITOR-MIB?
HPN-ICF-IKE-MONITOR-MIB is an HP/Comware ICF MIB providing statistics on Internet Key Exchange (IKE) tunnels used to establish IPsec VPN security associations. It exposes per-tunnel and aggregate IKE statistics, letting a manager query the state of a specific IKE tunnel or enumerate all active tunnels on the device. This is primarily a software/protocol-state monitoring MIB: it tracks whether IKE phase negotiations are succeeding, how many tunnels are up, and where negotiations are failing, which is essential for diagnosing VPN connectivity problems before they escalate to full outages. IKE monitoring naturally depends on the underlying IPsec/IKE protocol standards (RFC 2409/7296) even though this MIB itself is a vendor-specific wrapper. It is deployed on HP/H3C Comware VPN gateway routers terminating site-to-site or remote-access IPsec tunnels. Engineers can download the HPN-ICF-IKE-MONITOR-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in HPN-ICF-IKE-MONITOR-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- HP/H3C Comware VPN gateway router
Monitoring Examples
The module description states this MIB is designed to retrieve statistics for a specific IKE tunnel or for all IKE tunnels on the device, but no concrete object or table names were provided in the source excerpt, so a precise polling example cannot be grounded in real identifiers. In practice, an administrator would use such counters to check active tunnel counts and negotiation failure counts, spotting a spike in failures as a sign of misconfigured pre-shared keys or peer unavailability.
What Can Be Monitored
- active IKE tunnel count
- per-tunnel negotiation state
- IKE negotiation failures
- aggregate IKE tunnel statistics
This MIB depends on
Related MIBs
Imported Objects
From HPN-ICF-OID-MIB
| hpnicfCommon | OBJECT-IDENTITY |
From INET-ADDRESS-MIB
| InetAddress | |
| InetAddressType |
From SNMPv2-CONF
| MODULE-COMPLIANCE | |
| NOTIFICATION-GROUP | |
| OBJECT-GROUP |
From SNMPv2-SMI
| Counter32 | |
| Counter64 | |
| Gauge32 | |
| Integer32 | |
| IpAddress | |
| MODULE-IDENTITY | |
| NOTIFICATION-TYPE | |
| OBJECT-TYPE |
From SNMPv2-TC
| DisplayString | |
| TEXTUAL-CONVENTION |
How to Use in IPNetwork Monitor
Example using hpnicfIKEGlobalInOctets OID:
Select an HP/H3C Comware VPN gateway router (IKE tunnel statistics) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type hpnicfIKEGlobalInOctets into the Find box to locate it in the OID tree, then select it and click OK. The total number of octets received by all currently and previously active IPsec Phase-1 IKE Tunnels. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter64-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.
OIDs
| OID symbolic | OID numeric | Type | Access | Description |
|---|---|---|---|---|
| hpnicfIKEMonitor | 1.3.6.1.4.1.11.2.14.11.15.2.30 | The MIB is designed to get statistic information of IKE tunnels. With this MIB, we can get information of a certain IKE tunnel or all IKE tunnels | ||
| hpnicfIKEObjects | 1.3.6.1.4.1.11.2.14.11.15.2.30.1 | |||
| hpnicfIKETunnelTable | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.1 | not-accessible | The IPsec Phase-1 Internet Key Exchange Tunnel Table. There is one entry in this table for each active IPsec Phase-1 IKE Tunnel. | |
| hpnicfIKETunnelEntry | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.1.1 | not-accessible | The entry contains the information about hpnicfIKETunnelTable, such as negotiate mode, encryption algorithm and authentication algorithm, etc. | |
| I32 hpnicfIKETunIndex | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.1.1.1 | Integer32 | accessible-for-notify | The index of the IPsec Phase-1 IKE Tunnel Table. The value of the index is a number which begins at one and is incremented with each tunnel that is created. The value of this object will wrap at 2147483647. |
| HPN hpnicfIKETunLocalType | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.1.1.2 | HpnicfIKEIDType | read-only | The type of local peer identity. |
| STR hpnicfIKETunLocalValue1 | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.1.1.3 | DisplayString | read-only | The value of the local peer identity. If the local peer type is ipv4Addr/ipv6Addr, this is the IP address used to identify the local peer. If the local peer type is ipv4AddrSubnet/ipv6AddrSubnet, this is the subnet address. If the local peer type is ipv4AddrRange/ipv6AddrRange, this is the beginning IP address of the range. If the local peer type is fqdn/userFqdn, this is the host name used to identify the local peer. If the local peer type is derAsn1Dn, this is the binary DER encoding of an ASN.1 X.500 Distinguished Name [X.501] of the principal whose certificates are being exchanged to establish the SA. If the local peer type is derAsn1Gn, this is the binary DER encoding of an ASN.1 X.500 GeneralName [X.509] of the principal whose certificates are being exchanged to establish the SA. If the local peer type is keyId, this is an opaque byte stream which may be used to pass vendor-specific information necessary to identify which pre-shared key should be used to authenticate Aggressive mode negotiations. |
| STR hpnicfIKETunLocalValue2 | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.1.1.4 | DisplayString | read-only | The second specification of the local peer's IP address. If the local peer type is ipv4AddrSubnet/ipv6AddrSubnet, this is the subnet mask. If the local peer type is ipv4AddrRange/ipv6AddrRange, this is the ending IP address of the range. If the local peer type are others, this is a zero-length string. |
| IP hpnicfIKETunLocalAddr | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.1.1.5 | IpAddress | read-only | The IP address of the local endpoint for the IPsec Phase-1 IKE Tunnel. |
| HPN hpnicfIKETunRemoteType | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.1.1.6 | HpnicfIKEIDType | read-only | The type of remote peer identity. |
| STR hpnicfIKETunRemoteValue1 | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.1.1.7 | DisplayString | read-only | The value of the remote peer identity. If the remote peer type is ipv4Addr/ipv6Addr, this is the IP address used to identify the remote peer. If the remote peer type is ipv4AddrSubnet/ipv6AddrSubnet, this is the subnet address. If the remote peer type is ipv4AddrRange/ipv6AddrRange, this is the beginning IP address of the range. If the remote peer type is fqdn/userFqdn, this is the host name used to identify the remote peer. If the remote peer type is derAsn1Dn, this is the binary DER encoding of an ASN.1 X.500 Distinguished Name [X.501] of the principal whose certificates are being exchanged to establish the SA. If the remote peer type is derAsn1Gn, this is the binary DER encoding of an ASN.1 X.500 GeneralName [X.509] of the principal whose certificates are being exchanged to establish the SA. If the remote peer type is keyId, this is an opaque byte stream which may be used to pass vendor-specific information necessary to identify which pre-shared key should be used to authenticate Aggressive mode negotiations. |
| STR hpnicfIKETunRemoteValue2 | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.1.1.8 | DisplayString | read-only | The second specification of the remote peer's IP address. If the remote peer type is ipv4AddrSubnet/ipv6AddrSubnet, this is the subnet mask. If the remote peer type is ipv4AddrRange/ipv6AddrRange, this is the ending IP address of the range. If the remote peer type are others, this is a zero-length string. |
| IP hpnicfIKETunRemoteAddr | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.1.1.9 | IpAddress | read-only | The IP address of the remote peer for the IPsec Phase-1 IKE Tunnel. |
| INT hpnicfIKETunInitiator | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.1.1.10 | INTEGER | read-only | The initiator of this tunnel. |
| HPN hpnicfIKETunNegoMode | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.1.1.11 | HpnicfIKENegoMode | read-only | The negotiation mode of the IPsec Phase-1 IKE Tunnel. |
| HPN hpnicfIKETunDiffHellmanGrp | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.1.1.12 | HpnicfDiffHellmanGrp | read-only | The Diffie Hellman Group used in the IPsec Phase-1 IKE negotiations. |
| HPN hpnicfIKETunEncryptAlgo | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.1.1.13 | HpnicfEncryptAlgo | read-only | The encryption algorithm used in the IPsec Phase-1 IKE negotiations. |
| HPN hpnicfIKETunHashAlgo | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.1.1.14 | HpnicfAuthAlgo | read-only | The hash algorithm used in the IPsec Phase-1 IKE negotiations. |
| HPN hpnicfIKETunAuthMethod | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.1.1.15 | HpnicfIKEAuthMethod | read-only | The authentication method used in the IPsec Phase-1 IKE negotiations. |
| I32 hpnicfIKETunLifeTime | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.1.1.16 | Integer32 | read-only | The negotiated LifeTime of the IPsec Phase-1 IKE Tunnel in seconds. |
| I32 hpnicfIKETunActiveTime | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.1.1.17 | Integer32 | read-only | The duration the IPsec Phase-1 IKE tunnel has been active in seconds. |
| I32 hpnicfIKETunRemainTime | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.1.1.18 | Integer32 | read-only | The security association remaining time in seconds. |
| C32 hpnicfIKETunTotalRefreshes | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.1.1.19 | Counter32 | read-only | The total number of security association refreshing performed. |
| HPN hpnicfIKETunState | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.1.1.20 | HpnicfIKETunnelState | read-only | The State of IKE Tunnel. |
| I32 hpnicfIKETunDpdIntervalTime | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.1.1.21 | Integer32 | read-only | The time that trigger DPD request. If ipsec message is expected to be sent out and the interval time between current time and the last time receiving peer's IPsec message is bigger than this time, DPD request would be triggered. |
| I32 hpnicfIKETunDpdTimeOut | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.1.1.22 | Integer32 | read-only | The overtime of single DPD request. If DPD requests are refused three times, all security associations related would be deleted. |
| IPt hpnicfIKETunLocalInetAddrType | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.1.1.23 | InetAddressType | read-only | The type of the local peer's IP address. |
| IP hpnicfIKETunLocalInetAddr | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.1.1.24 | InetAddress | read-only | The IP address of the local peer for the IPsec Phase-1 IKE Tunnel. |
| IPt hpnicfIKETunRemoteInetAddrType | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.1.1.25 | InetAddressType | read-only | The type of the remote peer's IP address. |
| IP hpnicfIKETunRemoteInetAddr | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.1.1.26 | InetAddress | read-only | The IP address of the remote peer for the IPsec Phase-1 IKE Tunnel. |
| hpnicfIKETunnelStatTable | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.2 | not-accessible | The IPsec Phase-1 IKE Tunnel Statistic Table. | |
| hpnicfIKETunnelStatEntry | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.2.1 | not-accessible | The entry contains the information of hpnicfIKETunnelStatTable, such as the number of packets sent and received by the IKE tunnel, etc. | |
| C64 hpnicfIKETunInOctets | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.2.1.1 | Counter64 | read-only | The total number of octets received by this IPsec Phase-1 IKE Tunnel. |
| C64 hpnicfIKETunInPkts | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.2.1.2 | Counter64 | read-only | The total number of packets received by this IPsec Phase-1 IKE Tunnel. |
| C64 hpnicfIKETunInDropPkts | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.2.1.3 | Counter64 | read-only | The total number of packets dropped by this IPsec Phase-1 IKE Tunnel during receiving process. |
| C64 hpnicfIKETunInP2Exchgs | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.2.1.4 | Counter64 | read-only | The total number of IPsec Phase-2 exchanges received by this IPsec Phase-1 IKE Tunnel. |
| C64 hpnicfIKETunInP2ExchgRejets | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.2.1.5 | Counter64 | read-only | The total number of IPsec Phase-2 exchanges received and rejected by this IPsec Phase-1 Tunnel. |
| C64 hpnicfIKETunInP2SaDelRequests | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.2.1.6 | Counter64 | read-only | The total number of IPsec Phase-2 security association deleting requests received by this IPsec Phase-1 IKE Tunnel. |
| C64 hpnicfIKETunInP1SaDelRequests | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.2.1.7 | Counter64 | read-only | The total number of IPsec Phase-1 security association deleting requests. |
| C32 hpnicfIKETunInNotifys | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.2.1.8 | Counter32 | read-only | The total number of notifications received by this IPsec Phase-1 IKE Tunnel. |
| C64 hpnicfIKETunOutOctets | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.2.1.9 | Counter64 | read-only | The total number of octets sent by this IPsec Phase-1 IKE Tunnel. |
| C64 hpnicfIKETunOutPkts | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.2.1.10 | Counter64 | read-only | The total number of packets sent by this IPsec Phase-1 IKE Tunnel. |
| C64 hpnicfIKETunOutDropPkts | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.2.1.11 | Counter64 | read-only | The total number of packets dropped by this IPsec Phase-1 IKE Tunnel during sending process. |
| C64 hpnicfIKETunOutP2Exchgs | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.2.1.12 | Counter64 | read-only | The total number of IPsec Phase-2 exchanges sent by this IPsec Phase-1 IKE Tunnel. |
| C64 hpnicfIKETunOutP2ExchgRejects | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.2.1.13 | Counter64 | read-only | The total number of IPsec Phase-2 exchanges sent and rejected by this IPsec Phase-1 IKE Tunnel. |
| C64 hpnicfIKETunOutP2SaDelRequests | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.2.1.14 | Counter64 | read-only | The total number of IPsec Phase-2 security association deleting requests sent by this IPsec Phase-1 IKE Tunnel. |
| C64 hpnicfIKETunOutP1SaDelRequests | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.2.1.15 | Counter64 | read-only | The total number of IPsec Phase-1 security association deleting requests sent by this IPsec Phase-1 IKE Tunnel. |
| C32 hpnicfIKETunOutNotifys | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.2.1.16 | Counter32 | read-only | The total number of notifications sent by this IPsec Phase-1 Tunnel. |
| hpnicfIKEGlobalStats | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.3 | |||
| G32 hpnicfIKEGlobalActiveTunnels | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.3.1 | Gauge32 | read-only | The number of currently active IPsec Phase-1 IKE Tunnels. |
| C64 hpnicfIKEGlobalInOctetsEx | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.3.2 | Counter64 | read-only | The total number of octets received by all currently and previously active IPsec Phase-1 IKE Tunnels. |
| C64 hpnicfIKEGlobalInPkts | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.3.3 | Counter64 | read-only | The total number of packets received by all currently and previously active IPsec Phase-1 IKE Tunnels. |
| C64 hpnicfIKEGlobalInDropPkts | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.3.4 | Counter64 | read-only | The total number of packets which were dropped during receiving process by all currently and previously active IPsec Phase-1 IKE Tunnels. |
| C64 hpnicfIKEGlobalInP2Exchgs | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.3.5 | Counter64 | read-only | The total number of IPsec Phase-2 exchanges received by all currently and previously active IPsec Phase-1 IKE Tunnels. |
| C64 hpnicfIKEGlobalInP2ExchgRejects | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.3.6 | Counter64 | read-only | The total number of IPsec Phase-2 exchanges which were received and rejected by all currently and previously active IPsec Phase-1 IKE Tunnels. |
| C64 hpnicfIKEGlobalInP2SaDelRequests | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.3.7 | Counter64 | read-only | The total number of IPsec Phase-2 security association deleting requests received by all currently and previously active IPsec Phase-1 IKE Tunnels. |
| C32 hpnicfIKEGlobalInNotifys | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.3.8 | Counter32 | read-only | The total number of notifications received by all IPsec Phase-1 IKE Tunnels. |
| C64 hpnicfIKEGlobalOutOctets | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.3.9 | Counter64 | read-only | The total number of octets sent by all currently and previously active and IPsec Phase-1 IKE Tunnels. |
| C64 hpnicfIKEGlobalOutPkts | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.3.10 | Counter64 | read-only | The total number of packets sent by all currently and previously active and IPsec Phase-1 Tunnels. |
| C64 hpnicfIKEGlobalOutDropPkts | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.3.11 | Counter64 | read-only | The total number of packets which were dropped during sending process by all currently and previously active IPsec Phase-1 IKE Tunnels. |
| C64 hpnicfIKEGlobalOutP2Exchgs | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.3.12 | Counter64 | read-only | The total number of IPsec Phase-2 exchanges which were sent by all currently and previously active IPsec Phase-1 IKE Tunnels. |
| C64 hpnicfIKEGlobalOutP2ExchgRejects | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.3.13 | Counter64 | read-only | The total number of IPsec Phase-2 exchanges which were sent and rejected by all currently and previously active IPsec Phase-1 IKE Tunnels. |
| C64 hpnicfIKEGlobalOutP2SaDelRequests | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.3.14 | Counter64 | read-only | The total number of IPsec Phase-2 SA deleting requests sent by all currently and previously active IPsec Phase-1 IKE Tunnels. |
| C32 hpnicfIKEGlobalOutNotifys | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.3.15 | Counter32 | read-only | The total number of notifications sent by all active IPsec Phase-1 IKE Tunnels. |
| C32 hpnicfIKEGlobalInitTunnels | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.3.16 | Counter32 | read-only | The total number of IPsec Phase-1 IKE Tunnels which were locally initiated. |
| C32 hpnicfIKEGlobalInitTunnelFails | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.3.17 | Counter32 | read-only | The total number of IPsec Phase-1 IKE Tunnels which were locally initiated and failed to activate. |
| C32 hpnicfIKEGlobalRespTunnels | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.3.18 | Counter32 | read-only | The total number of IPsec Phase-1 IKE Tunnels which were remotely initiated. |
| C32 hpnicfIKEGlobalRespTunnelFails | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.3.19 | Counter32 | read-only | The total number of IPsec Phase-1 IKE Tunnels which were remotely initiated and failed to activate. |
| C32 hpnicfIKEGlobalAuthFails | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.3.20 | Counter32 | read-only | The total number of authentications which ended in failure by all current and previous IPsec Phase-1 IKE Tunnels. |
| C32 hpnicfIKEGlobalNoSaFails | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.3.21 | Counter32 | read-only | The total number of non-existent Security Association in failures which occurred during processing of all current and previous IPsec Phase-1 IKE Tunnels. |
| C32 hpnicfIKEGlobalInvalidCookieFails | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.3.22 | Counter32 | read-only | The total number of invalid cookie in failures which occurred during processing of all current and previous IPsec Phase-1 IKE Tunnels. |
| C32 hpnicfIKEGlobalAttrNotSuppFails | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.3.23 | Counter32 | read-only | The total number of attributes not supported in failures which occurred during processing of all current and previous IPsec Phase-1 IKE Tunnels. |
| C32 hpnicfIKEGlobalNoProposalChosenFails | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.3.24 | Counter32 | read-only | The total number of no proposal chosen in failures which occurred during processing of all current and previous IPsec Phase-1 IKE Tunnels. |
| C32 hpnicfIKEGlobalUnsportExchTypeFails | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.3.25 | Counter32 | read-only | The total number of unsupported exchange type in failures which occurred during processing of all current and previous IPsec Phase-1 IKE Tunnels. |
| C32 hpnicfIKEGlobalInvalidIdFails | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.3.26 | Counter32 | read-only | The total number of invalid id Information in failures which occurred during processing of all current and previous IPsec Phase-1 IKE Tunnels. |
| C32 hpnicfIKEGlobalInvalidProFails | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.3.27 | Counter32 | read-only | The total number of invalid protocol id in failures which occurred during processing of all current and previous IPsec Phase-1 IKE Tunnels. |
| C32 hpnicfIKEGlobalCertTypeUnsuppFails | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.3.28 | Counter32 | read-only | The total number of certificate type unsupported in failures which occurred during processing of all current and previous IPsec Phase-1 IKE Tunnels. |
| C32 hpnicfIKEGlobalInvalidCertAuthFails | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.3.29 | Counter32 | read-only | The total number of failures because of invalid certificate authority which occurred during processing of all current and previous IPsec Phase-1 IKE Tunnels. |
| C32 hpnicfIKEGlobalInvalidSignFails | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.3.30 | Counter32 | read-only | The total number of failures because of the invalid signature which occurred during processing of all current and previous IPsec Phase-1 IKE Tunnels. |
| C32 hpnicfIKEGlobalCertUnavailableFails | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.3.31 | Counter32 | read-only | The total number of certificate unavailable in failures which occurred during processing of all current and previous IPsec Phase-1 IKE Tunnels. |
| hpnicfIKETrapObject | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.4 | |||
| I32 hpnicfIKEProposalNumber | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.4.1 | Integer32 | accessible-for-notify | The IKE proposal's number with a trap. |
| I32 hpnicfIKEProposalSize | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.4.2 | Integer32 | accessible-for-notify | The number of IKE proposals with a trap. |
| STR hpnicfIKEIdInformation | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.4.3 | DisplayString | accessible-for-notify | The id information with a trap. |
| I32 hpnicfIKEProtocolNum | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.4.4 | Integer32 | accessible-for-notify | The protocol number with a trap |
| STR hpnicfIKECertInformation | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.4.5 | DisplayString | accessible-for-notify | The certificate information with a trap. |
| hpnicfIKETrapCntl | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.5 | |||
| HPN hpnicfIKETrapGlobalCntl | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.5.1 | HpnicfTrapStatus | read-write | Indicates whether all IKE traps should be generated. |
| HPN hpnicfIKETunnelStartTrapCntl | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.5.2 | HpnicfTrapStatus | read-write | Indicates whether hpnicfIKETunnelStart traps should be generated. |
| HPN hpnicfIKETunnelStopTrapCntl | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.5.3 | HpnicfTrapStatus | read-write | Indicates whether hpnicfIKETunnelStop traps should be generated. |
| HPN hpnicfIKENoSaTrapCntl | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.5.4 | HpnicfTrapStatus | read-write | Indicates whether hpnicfIKENoSaFailure traps should be generated. |
| HPN hpnicfIKEEncryFailureTrapCntl | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.5.5 | HpnicfTrapStatus | read-write | Indicates whether hpnicfIKEEncryFailFailure traps should be generated. |
| HPN hpnicfIKEDecryFailureTrapCntl | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.5.6 | HpnicfTrapStatus | read-write | Indicates whether hpnicfIKEDecryFailFailure traps should be generated. |
| HPN hpnicfIKEInvalidProposalTrapCntl | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.5.7 | HpnicfTrapStatus | read-write | Indicates whether hpnicfIKEInvalidProposalFailure traps should be generated. |
| HPN hpnicfIKEAuthFailTrapCntl | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.5.8 | HpnicfTrapStatus | read-write | Indicates whether hpnicfIKEAuthFailFailure traps should be generated. |
| HPN hpnicfIKEInvalidCookieTrapCntl | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.5.9 | HpnicfTrapStatus | read-write | Indicates whether hpnicfIKEInvalidCookieFailure traps should be generated. |
| HPN hpnicfIKEInvalidSpiTrapCntl | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.5.10 | HpnicfTrapStatus | read-write | Indicates whether hpnicfIKEInvalidSpiFailure traps should be generated. |
| HPN hpnicfIKEAttrNotSuppTrapCntl | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.5.11 | HpnicfTrapStatus | read-write | Indicates whether hpnicfIKEAttrNotSuppFailure traps should be generated. |
| HPN hpnicfIKEUnsportExchTypeTrapCntl | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.5.12 | HpnicfTrapStatus | read-write | Indicates whether hpnicfIKEUnsportExchTypeFailure traps should be generated. |
| HPN hpnicfIKEInvalidIdTrapCntl | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.5.13 | HpnicfTrapStatus | read-write | Indicates whether hpnicfIKEInvalidIdFailure traps should be generated. |
| HPN hpnicfIKEInvalidProtocolTrapCntl | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.5.14 | HpnicfTrapStatus | read-write | Indicates whether hpnicfIKEInvalidProtocolFailure traps should be generated. |
| HPN hpnicfIKECertTypeUnsuppTrapCntl | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.5.15 | HpnicfTrapStatus | read-write | Indicates whether hpnicfIKECertTypeUnsuppFailure traps should be generated. |
| HPN hpnicfIKEInvalidCertAuthTrapCntl | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.5.16 | HpnicfTrapStatus | read-write | Indicates whether hpnicfIKEInvalidCertAuthFailure traps should be generated. |
| HPN hpnicfIKEInvalidSignTrapCntl | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.5.17 | HpnicfTrapStatus | read-write | Indicates whether hpnicfIKEInvalidSignFailure traps should be generated. |
| HPN hpnicfIKECertUnavailableTrapCntl | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.5.18 | HpnicfTrapStatus | read-write | Indicates whether hpnicfIKECertUnavailableFailure traps should be generated. |
| HPN hpnicfIKEProposalAddTrapCntl | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.5.19 | HpnicfTrapStatus | read-write | Indicates whether hpnicfIKEProposalAdd traps should be generated. |
| HPN hpnicfIKEProposalDelTrapCntl | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.5.20 | HpnicfTrapStatus | read-write | Indicates whether hpnicfIKEProposalDel traps should be generated. |
| hpnicfIKETrap | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.6 | |||
| hpnicfIKENotifications | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.6.1 | |||
| NTF hpnicfIKETunnelStart | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.6.1.1 | This notification is generated when an IPsec Phase-1 IKE Tunnel is created. | ||
| NTF hpnicfIKETunnelStop | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.6.1.2 | This notification is generated when an IPsec Phase-1 IKE Tunnel is deleted. | ||
| NTF hpnicfIKENoSaFailure | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.6.1.3 | This notification is generated when the IKE tunnel has a non-existent SA error. | ||
| NTF hpnicfIKEEncryFailFailure | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.6.1.4 | This notification is generated when the IKE tunnel has an encrypting failure. | ||
| NTF hpnicfIKEDecryFailFailure | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.6.1.5 | This notification is generated when the IKE tunnel has a decrypting failure. | ||
| NTF hpnicfIKEInvalidProposalFailure | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.6.1.6 | This notification is generated when the IPsec phase-1 invalid proposal occurs. | ||
| NTF hpnicfIKEAuthFailFailure | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.6.1.7 | This notification is generated when the IPsec phase-1 authentication failure occurs. | ||
| NTF hpnicfIKEInvalidCookieFailure | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.6.1.8 | This notification is generated when the IPsec phase-1 invalid cookie failure occurs. | ||
| NTF hpnicfIKEAttrNotSuppFailure | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.6.1.9 | This notification is generated when the IPsec phase-1 unsupported attribute failure occurs. | ||
| NTF hpnicfIKEUnsportExchTypeFailure | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.6.1.10 | This notification is generated when the IPsec phase-1 unsupported exchange type failure occurs. | ||
| NTF hpnicfIKEInvalidIdFailure | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.6.1.11 | This notification is generated when the IPsec phase-1 invalid id failure occurs. | ||
| NTF hpnicfIKEInvalidProtocolFailure | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.6.1.12 | This notification is generated when the processing for an IPsec Phase-1 IKE Tunnel has a protocol related errors. | ||
| NTF hpnicfIKECertTypeUnsuppFailure | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.6.1.13 | This notification is generated when the IPsec phase-1 unsupported certificate type failure occurs. | ||
| NTF hpnicfIKEInvalidCertAuthFailure | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.6.1.14 | This notification is generated when the IPsec phase-1 invalid certificate authorization failure occurs. | ||
| NTF hpnicfIKElInvalidSignFailure | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.6.1.15 | This notification is generated when the IPsec phase-1 invalid signature failure occurs. | ||
| NTF hpnicfIKECertUnavailableFailure | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.6.1.16 | This notification is generated when the IPsec phase-1 certificate unavailable failure occurs. | ||
| NTF hpnicfIKEProposalAdd | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.6.1.17 | This notification is generated when an IKE proposal is added. | ||
| NTF hpnicfIKEProposalDel | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.6.1.18 | This notification is generated when an IKE proposal is deleted. | ||
| hpnicfIKEScalarObjects | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.7 | |||
| STR hpnicfIKEMIBVersion | 1.3.6.1.4.1.11.2.14.11.15.2.30.1.7.1 | DisplayString | read-only | Version string of this MIB. |
| hpnicfIKEConformance | 1.3.6.1.4.1.11.2.14.11.15.2.30.2 | |||
| hpnicfIKECompliances | 1.3.6.1.4.1.11.2.14.11.15.2.30.2.1 | |||
| hpnicfIKECompliance | 1.3.6.1.4.1.11.2.14.11.15.2.30.2.1.1 | |||
| hpnicfIKEGroups | 1.3.6.1.4.1.11.2.14.11.15.2.30.2.2 | |||
| hpnicfIKETunnelTableGroup | 1.3.6.1.4.1.11.2.14.11.15.2.30.2.2.1 | The group contains the IKE tunnel's property information. | ||
| hpnicfIKETunnelStatTableGroup | 1.3.6.1.4.1.11.2.14.11.15.2.30.2.2.2 | The group contains the IKE tunnel's statistic information. | ||
| hpnicfIKEGlobalStatsGroup | 1.3.6.1.4.1.11.2.14.11.15.2.30.2.2.3 | The group contains all of the IKE tunnel's statistic information. | ||
| hpnicfIKETrapObjectGroup | 1.3.6.1.4.1.11.2.14.11.15.2.30.2.2.4 | The group contains all of trap objects of IKE tunnels. | ||
| hpnicfIKETrapCntlGroup | 1.3.6.1.4.1.11.2.14.11.15.2.30.2.2.5 | The group contains all of trap switches of IKE tunnels. | ||
| hpnicfIKETrapGroup | 1.3.6.1.4.1.11.2.14.11.15.2.30.2.2.6 | The group contains all of trap of IKE tunnels. | ||
| hpnicfIKEScalarObjectsGroup | 1.3.6.1.4.1.11.2.14.11.15.2.30.2.2.7 | The group contains all of scalar objects of the MIB. |
RFC description
MIB for monitoring IKE tunnel statistics and parameters including encryption and authentication.
Start monitoring HP/H3C Comware VPN gateway router (IKE tunnel statistics) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.